HTTPS configuration for OctoberCMS
Hi everyone here I am again. I have been looking for the correct https configuration for october so that when visitors type www.mywebsite.com, the brower will assume https:// to be the beginning instead.
I changed the linkPolicy to secure (I tried force too but not sure where is the app.url that it mentioned in the comment) and 'backendForceSecure' to true, it works on when I access www.mywebsite.com/backend (automatically access via https) but not www.mywebsite.com (still access via http). Please help.
laravel-5.3 octobercms
asked May 18 '17 at 8:56
warmjaijaiwarmjaijai
2651718
add a comment |
Hi everyone here I am again. I have been looking for the correct https configuration for october so that when visitors type www.mywebsite.com, the brower will assume https:// to be the beginning instead.
I changed the linkPolicy to secure (I tried force too but not sure where is the app.url that it mentioned in the comment) and 'backendForceSecure' to true, it works on when I access www.mywebsite.com/backend (automatically access via https) but not www.mywebsite.com (still access via http). Please help.
laravel-5.3 octobercms
asked May 18 '17 at 8:56
warmjaijaiwarmjaijai
2651718
Cant you use .htaccess for that?
– dragontree
May 18 '17 at 11:46
@dragontree I do not think that helps but thanks for your input. There should be some configuration that we can set I believe...
– warmjaijai
May 22 '17 at 9:03
As far as I know, there there is currently no such setting for the frontend in OctoberCMS, that is why I suggested using htaccess
– dragontree
May 22 '17 at 9:32
Noted. Thanks a lot for your information. Really hope that OctoberCMS will be improved for these common requirements.
– warmjaijai
May 23 '17 at 6:29
add a comment |
Hi everyone here I am again. I have been looking for the correct https configuration for october so that when visitors type www.mywebsite.com, the brower will assume https:// to be the beginning instead.
I changed the linkPolicy to secure (I tried force too but not sure where is the app.url that it mentioned in the comment) and 'backendForceSecure' to true, it works on when I access www.mywebsite.com/backend (automatically access via https) but not www.mywebsite.com (still access via http). Please help.
laravel-5.3 octobercms
asked May 18 '17 at 8:56
warmjaijaiwarmjaijai
2651718
Hi everyone here I am again. I have been looking for the correct https configuration for october so that when visitors type www.mywebsite.com, the brower will assume https:// to be the beginning instead.
I changed the linkPolicy to secure (I tried force too but not sure where is the app.url that it mentioned in the comment) and 'backendForceSecure' to true, it works on when I access www.mywebsite.com/backend (automatically access via https) but not www.mywebsite.com (still access via http). Please help.
laravel-5.3 octobercms
laravel-5.3 octobercms
asked May 18 '17 at 8:56
warmjaijaiwarmjaijai
2651718
asked May 18 '17 at 8:56
warmjaijaiwarmjaijai
2651718
edited May 18 '17 at 9:07
warmjaijai
asked May 18 '17 at 8:56
warmjaijaiwarmjaijai
2651718
asked May 18 '17 at 8:56
warmjaijaiwarmjaijai
2651718
asked May 18 '17 at 8:56
warmjaijaiwarmjaijai
2651718
2651718
Cant you use .htaccess for that?
– dragontree
May 18 '17 at 11:46
@dragontree I do not think that helps but thanks for your input. There should be some configuration that we can set I believe...
– warmjaijai
May 22 '17 at 9:03
As far as I know, there there is currently no such setting for the frontend in OctoberCMS, that is why I suggested using htaccess
– dragontree
May 22 '17 at 9:32
Noted. Thanks a lot for your information. Really hope that OctoberCMS will be improved for these common requirements.
– warmjaijai
May 23 '17 at 6:29
add a comment |
Cant you use .htaccess for that?
– dragontree
May 18 '17 at 11:46
@dragontree I do not think that helps but thanks for your input. There should be some configuration that we can set I believe...
– warmjaijai
May 22 '17 at 9:03
As far as I know, there there is currently no such setting for the frontend in OctoberCMS, that is why I suggested using htaccess
– dragontree
May 22 '17 at 9:32
Noted. Thanks a lot for your information. Really hope that OctoberCMS will be improved for these common requirements.
– warmjaijai
May 23 '17 at 6:29
Cant you use .htaccess for that?
– dragontree
May 18 '17 at 11:46
Cant you use .htaccess for that?
– dragontree
May 18 '17 at 11:46
@dragontree I do not think that helps but thanks for your input. There should be some configuration that we can set I believe...
– warmjaijai
May 22 '17 at 9:03
@dragontree I do not think that helps but thanks for your input. There should be some configuration that we can set I believe...
– warmjaijai
May 22 '17 at 9:03
As far as I know, there there is currently no such setting for the frontend in OctoberCMS, that is why I suggested using htaccess
– dragontree
May 22 '17 at 9:32
As far as I know, there there is currently no such setting for the frontend in OctoberCMS, that is why I suggested using htaccess
– dragontree
May 22 '17 at 9:32
Noted. Thanks a lot for your information. Really hope that OctoberCMS will be improved for these common requirements.
– warmjaijai
May 23 '17 at 6:29
Noted. Thanks a lot for your information. Really hope that OctoberCMS will be improved for these common requirements.
– warmjaijai
May 23 '17 at 6:29
add a comment |
3 Answers
3
active
oldest
votes
This solution worked for me.
1- Enable debug mode:
in config/app.php
'debug' => true,
2- Clear cache
3- Add those lines, in the .htaccess file at the root of your site :
## Force secure connection
RewriteCond %{HTTP:X-Forwarded-Proto} =http [OR]
RewriteCond %{HTTP:X-Forwarded-Proto} =""
RewriteCond %{HTTPS} !=on
RewriteRule ^https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
4- Modifiy the app.url in the /web/config/app.php file
'app.url' => 'https://...',
answered Nov 20 '18 at 16:54
BehiryBehiry
14113
add a comment |
Still no solution for configure https in October CMS? I have nginx shared hosting with Let's encrypt certificate and linkPolicy='secure' still not work properly.
How this CMS want to be popular if such a "small" problem can't be fix for 2 years (just check official forum and threads like "Routing over SSL", "Forcing SSL" etc.
Using .htaccess is only workaround.
F. ex. how to solve this in nginx (without .htaccess)? Buy another server?
answered May 30 '17 at 14:47
Zuba EmanZuba Eman
113
OctoberCMS is a very good CMS in my opinion but there is still a lot of space to be improved. I am also struggling a lot in looking for answers for some issues but no luck...
– warmjaijai
Jun 1 '17 at 6:05
And I dont think it is proper to ask questions by answering people's questions in Stackoverflow. You can choose to comment on it like what I do now instead.
– warmjaijai
Jun 1 '17 at 6:09
add a comment |
Use .htaccess or configure your apache or ngix to use https and redirect all traffic to https.
ngix: https://serverfault.com/questions/67316/in-nginx-how-can-i-rewrite-all-http-requests-to-https-while-maintaining-sub-dom
apache How to redirect all HTTP requests to HTTPS
Use htst headers
Strict-Transport-Security: max-age=31536000
https://www.owasp.org/index.php/HTTP_Strict_Transport_Security_Cheat_Sheet
In path/to/october/config/app.php set your url value to a https domain.
answered May 30 '17 at 15:08
TschallackaTschallacka
15.1k65289
Thanks for your input but I yet to have the chance to try that out.
– warmjaijai
Jun 1 '17 at 6:06
add a comment |
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f44043086%2fhttps-configuration-for-octobercms%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
3 Answers
3
active
oldest
votes
3 Answers
3
active
oldest
votes
active
oldest
votes
active
oldest
votes
This solution worked for me.
1- Enable debug mode:
in config/app.php
'debug' => true,
2- Clear cache
3- Add those lines, in the .htaccess file at the root of your site :
## Force secure connection
RewriteCond %{HTTP:X-Forwarded-Proto} =http [OR]
RewriteCond %{HTTP:X-Forwarded-Proto} =""
RewriteCond %{HTTPS} !=on
RewriteRule ^https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
4- Modifiy the app.url in the /web/config/app.php file
'app.url' => 'https://...',
answered Nov 20 '18 at 16:54
BehiryBehiry
14113
add a comment |
This solution worked for me.
1- Enable debug mode:
in config/app.php
'debug' => true,
2- Clear cache
3- Add those lines, in the .htaccess file at the root of your site :
## Force secure connection
RewriteCond %{HTTP:X-Forwarded-Proto} =http [OR]
RewriteCond %{HTTP:X-Forwarded-Proto} =""
RewriteCond %{HTTPS} !=on
RewriteRule ^https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
4- Modifiy the app.url in the /web/config/app.php file
'app.url' => 'https://...',
answered Nov 20 '18 at 16:54
BehiryBehiry
14113
add a comment |
This solution worked for me.
1- Enable debug mode:
in config/app.php
'debug' => true,
2- Clear cache
3- Add those lines, in the .htaccess file at the root of your site :
## Force secure connection
RewriteCond %{HTTP:X-Forwarded-Proto} =http [OR]
RewriteCond %{HTTP:X-Forwarded-Proto} =""
RewriteCond %{HTTPS} !=on
RewriteRule ^https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
4- Modifiy the app.url in the /web/config/app.php file
'app.url' => 'https://...',
answered Nov 20 '18 at 16:54
BehiryBehiry
14113
This solution worked for me.
1- Enable debug mode:
in config/app.php
'debug' => true,
2- Clear cache
3- Add those lines, in the .htaccess file at the root of your site :
## Force secure connection
RewriteCond %{HTTP:X-Forwarded-Proto} =http [OR]
RewriteCond %{HTTP:X-Forwarded-Proto} =""
RewriteCond %{HTTPS} !=on
RewriteRule ^https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
4- Modifiy the app.url in the /web/config/app.php file
'app.url' => 'https://...',
answered Nov 20 '18 at 16:54
BehiryBehiry
14113
edited Nov 20 '18 at 17:04
answered Nov 20 '18 at 16:54
BehiryBehiry
14113
answered Nov 20 '18 at 16:54
BehiryBehiry
14113
answered Nov 20 '18 at 16:54
BehiryBehiry
14113
14113
add a comment |
add a comment |
Still no solution for configure https in October CMS? I have nginx shared hosting with Let's encrypt certificate and linkPolicy='secure' still not work properly.
How this CMS want to be popular if such a "small" problem can't be fix for 2 years (just check official forum and threads like "Routing over SSL", "Forcing SSL" etc.
Using .htaccess is only workaround.
F. ex. how to solve this in nginx (without .htaccess)? Buy another server?
answered May 30 '17 at 14:47
Zuba EmanZuba Eman
113
OctoberCMS is a very good CMS in my opinion but there is still a lot of space to be improved. I am also struggling a lot in looking for answers for some issues but no luck...
– warmjaijai
Jun 1 '17 at 6:05
And I dont think it is proper to ask questions by answering people's questions in Stackoverflow. You can choose to comment on it like what I do now instead.
– warmjaijai
Jun 1 '17 at 6:09
add a comment |
Still no solution for configure https in October CMS? I have nginx shared hosting with Let's encrypt certificate and linkPolicy='secure' still not work properly.
How this CMS want to be popular if such a "small" problem can't be fix for 2 years (just check official forum and threads like "Routing over SSL", "Forcing SSL" etc.
Using .htaccess is only workaround.
F. ex. how to solve this in nginx (without .htaccess)? Buy another server?
answered May 30 '17 at 14:47
Zuba EmanZuba Eman
113
OctoberCMS is a very good CMS in my opinion but there is still a lot of space to be improved. I am also struggling a lot in looking for answers for some issues but no luck...
– warmjaijai
Jun 1 '17 at 6:05
And I dont think it is proper to ask questions by answering people's questions in Stackoverflow. You can choose to comment on it like what I do now instead.
– warmjaijai
Jun 1 '17 at 6:09
add a comment |
Still no solution for configure https in October CMS? I have nginx shared hosting with Let's encrypt certificate and linkPolicy='secure' still not work properly.
How this CMS want to be popular if such a "small" problem can't be fix for 2 years (just check official forum and threads like "Routing over SSL", "Forcing SSL" etc.
Using .htaccess is only workaround.
F. ex. how to solve this in nginx (without .htaccess)? Buy another server?
answered May 30 '17 at 14:47
Zuba EmanZuba Eman
113
Still no solution for configure https in October CMS? I have nginx shared hosting with Let's encrypt certificate and linkPolicy='secure' still not work properly.
How this CMS want to be popular if such a "small" problem can't be fix for 2 years (just check official forum and threads like "Routing over SSL", "Forcing SSL" etc.
Using .htaccess is only workaround.
F. ex. how to solve this in nginx (without .htaccess)? Buy another server?
answered May 30 '17 at 14:47
Zuba EmanZuba Eman
113
answered May 30 '17 at 14:47
Zuba EmanZuba Eman
113
answered May 30 '17 at 14:47
Zuba EmanZuba Eman
113
answered May 30 '17 at 14:47
Zuba EmanZuba Eman
113
113
OctoberCMS is a very good CMS in my opinion but there is still a lot of space to be improved. I am also struggling a lot in looking for answers for some issues but no luck...
– warmjaijai
Jun 1 '17 at 6:05
And I dont think it is proper to ask questions by answering people's questions in Stackoverflow. You can choose to comment on it like what I do now instead.
– warmjaijai
Jun 1 '17 at 6:09
add a comment |
OctoberCMS is a very good CMS in my opinion but there is still a lot of space to be improved. I am also struggling a lot in looking for answers for some issues but no luck...
– warmjaijai
Jun 1 '17 at 6:05
And I dont think it is proper to ask questions by answering people's questions in Stackoverflow. You can choose to comment on it like what I do now instead.
– warmjaijai
Jun 1 '17 at 6:09
OctoberCMS is a very good CMS in my opinion but there is still a lot of space to be improved. I am also struggling a lot in looking for answers for some issues but no luck...
– warmjaijai
Jun 1 '17 at 6:05
OctoberCMS is a very good CMS in my opinion but there is still a lot of space to be improved. I am also struggling a lot in looking for answers for some issues but no luck...
– warmjaijai
Jun 1 '17 at 6:05
And I dont think it is proper to ask questions by answering people's questions in Stackoverflow. You can choose to comment on it like what I do now instead.
– warmjaijai
Jun 1 '17 at 6:09
And I dont think it is proper to ask questions by answering people's questions in Stackoverflow. You can choose to comment on it like what I do now instead.
– warmjaijai
Jun 1 '17 at 6:09
add a comment |
Use .htaccess or configure your apache or ngix to use https and redirect all traffic to https.
ngix: https://serverfault.com/questions/67316/in-nginx-how-can-i-rewrite-all-http-requests-to-https-while-maintaining-sub-dom
apache How to redirect all HTTP requests to HTTPS
Use htst headers
Strict-Transport-Security: max-age=31536000
https://www.owasp.org/index.php/HTTP_Strict_Transport_Security_Cheat_Sheet
In path/to/october/config/app.php set your url value to a https domain.
answered May 30 '17 at 15:08
TschallackaTschallacka
15.1k65289
Thanks for your input but I yet to have the chance to try that out.
– warmjaijai
Jun 1 '17 at 6:06
add a comment |
Use .htaccess or configure your apache or ngix to use https and redirect all traffic to https.
ngix: https://serverfault.com/questions/67316/in-nginx-how-can-i-rewrite-all-http-requests-to-https-while-maintaining-sub-dom
apache How to redirect all HTTP requests to HTTPS
Use htst headers
Strict-Transport-Security: max-age=31536000
https://www.owasp.org/index.php/HTTP_Strict_Transport_Security_Cheat_Sheet
In path/to/october/config/app.php set your url value to a https domain.
answered May 30 '17 at 15:08
TschallackaTschallacka
15.1k65289
Thanks for your input but I yet to have the chance to try that out.
– warmjaijai
Jun 1 '17 at 6:06
add a comment |
Use .htaccess or configure your apache or ngix to use https and redirect all traffic to https.
ngix: https://serverfault.com/questions/67316/in-nginx-how-can-i-rewrite-all-http-requests-to-https-while-maintaining-sub-dom
apache How to redirect all HTTP requests to HTTPS
Use htst headers
Strict-Transport-Security: max-age=31536000
https://www.owasp.org/index.php/HTTP_Strict_Transport_Security_Cheat_Sheet
In path/to/october/config/app.php set your url value to a https domain.
answered May 30 '17 at 15:08
TschallackaTschallacka
15.1k65289
Use .htaccess or configure your apache or ngix to use https and redirect all traffic to https.
ngix: https://serverfault.com/questions/67316/in-nginx-how-can-i-rewrite-all-http-requests-to-https-while-maintaining-sub-dom
apache How to redirect all HTTP requests to HTTPS
Use htst headers
Strict-Transport-Security: max-age=31536000
https://www.owasp.org/index.php/HTTP_Strict_Transport_Security_Cheat_Sheet
In path/to/october/config/app.php set your url value to a https domain.
answered May 30 '17 at 15:08
TschallackaTschallacka
15.1k65289
answered May 30 '17 at 15:08
TschallackaTschallacka
15.1k65289
answered May 30 '17 at 15:08
TschallackaTschallacka
15.1k65289
answered May 30 '17 at 15:08
TschallackaTschallacka
15.1k65289
15.1k65289
Thanks for your input but I yet to have the chance to try that out.
– warmjaijai
Jun 1 '17 at 6:06
add a comment |
Thanks for your input but I yet to have the chance to try that out.
– warmjaijai
Jun 1 '17 at 6:06
Thanks for your input but I yet to have the chance to try that out.
– warmjaijai
Jun 1 '17 at 6:06
Thanks for your input but I yet to have the chance to try that out.
– warmjaijai
Jun 1 '17 at 6:06
add a comment |
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f44043086%2fhttps-configuration-for-octobercms%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Cant you use .htaccess for that?
– dragontree
May 18 '17 at 11:46
@dragontree I do not think that helps but thanks for your input. There should be some configuration that we can set I believe...
– warmjaijai
May 22 '17 at 9:03
As far as I know, there there is currently no such setting for the frontend in OctoberCMS, that is why I suggested using htaccess
– dragontree
May 22 '17 at 9:32
Noted. Thanks a lot for your information. Really hope that OctoberCMS will be improved for these common requirements.
– warmjaijai
May 23 '17 at 6:29